@repo-os/repoos 0.5.66 → 0.5.68

package/dist/.build-info.json

@@ -1,5 +1,5 @@
 {
-  "hash": "90878be478d9457133036cf01bb56796b507ad255d1afc5321c1fb61bcec65a7",
-  "version": "0.5.66",
+  "hash": "a50a11bbcdcbcbedd23ed2410aa902333da0a7c6a5f48a204f67758d061c71d1",
+  "version": "0.5.68",
   "devUi": false
 }

package/dist/.build-stamp.json

@@ -1,3 +1,3 @@
 {
-  "generatedAt": "2026-10-06T02:22:31.964Z"
+  "generatedAt": "2026-10-09T03:35:17.984Z"
 }

package/dist/cli/api-route-parity.d.ts

@@ -0,0 +1,13 @@
+/**
+ * CLI/API parity map (#0723). Every registered `/api/*` route must match at
+ * least one rule here or the parity test fails.
+ *
+ * Allowlist entries use exact method + pattern strings from `Router.listRoutes()`
+ * — no broad substring matchers that could hide new routes.
+ */
+export interface ApiRouteRef {
+    method: string;
+    pattern: string;
+}
+export declare function isApiRouteCovered(route: ApiRouteRef): boolean;
+export declare function uncoveredApiRoutes(routes: readonly ApiRouteRef[]): ApiRouteRef[];

package/dist/cli/api-route-parity.js

@@ -0,0 +1,132 @@
+/**
+ * CLI/API parity map (#0723). Every registered `/api/*` route must match at
+ * least one rule here or the parity test fails.
+ *
+ * Allowlist entries use exact method + pattern strings from `Router.listRoutes()`
+ * — no broad substring matchers that could hide new routes.
+ */
+const exact = (method, pattern) => (r) => r.method === method && r.pattern === pattern;
+const re = (method, patternSource) => (r) => r.method === method && r.pattern === patternSource;
+/** Routes implemented by the server-backed control CLI (#0723). */
+const CONTROL_API_MATCHERS = [
+    re("POST", /^\/api\/tasks\/([^/]+)\/(start|pause|message|done)$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/preview$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/preview\/stop$/.source),
+    exact("GET", "/api/config"),
+    exact("PATCH", "/api/config"),
+    exact("GET", "/api/remote-validation/status"),
+    exact("POST", "/api/remote-validation/test"),
+    exact("GET", "/api/agents/running"),
+    exact("GET", "/api/stats/board"),
+    exact("GET", "/api/driver/brief"),
+    exact("GET", "/api/events"),
+    exact("POST", "/api/cto/heartbeat"),
+    // `repoos review` → PATCH status=review; `repoos override` → PATCH overrides
+    re("PATCH", /^\/api\/tasks\/([^/]+)$/.source),
+];
+/** Routes covered by existing file-level CLI commands (not HTTP). */
+const FILE_CLI_MATCHERS = [
+    exact("GET", "/api/health"),
+    exact("GET", "/api/tasks"),
+    re("GET", /^\/api\/tasks\/([^/]+)$/.source),
+    exact("POST", "/api/tasks"),
+    re("DELETE", /^\/api\/tasks\/([^/]+)$/.source),
+    exact("GET", "/api/check-plan"),
+];
+/** UI-only, SSE/hub, auth, or internal routes — no CLI required. */
+const UI_ONLY_MATCHERS = [
+    (r) => r.pattern.startsWith("/api/auth/"),
+    (r) => r.pattern.startsWith("/api/hub/"),
+    (r) => r.pattern.startsWith("/api/telegram/"),
+    exact("GET", "/api/index"),
+    exact("GET", "/api/board"),
+    exact("GET", "/api/counts"),
+    exact("GET", "/api/docs"),
+    (r) => r.pattern.startsWith("/api/repo/"),
+    (r) => r.pattern.startsWith("/api/inputs"),
+    (r) => r.pattern.startsWith("/api/skills"),
+    (r) => r.pattern.startsWith("/api/skill-registry"),
+    (r) => r.pattern.startsWith("/api/stories"),
+    exact("GET", "/api/system"),
+    exact("GET", "/api/system/logs"),
+    (r) => r.pattern.startsWith("/api/support/"),
+    (r) => r.pattern.startsWith("/api/tunnel/"),
+    (r) => r.pattern.startsWith("/api/release"),
+    (r) => r.pattern.startsWith("/api/deployments"),
+    (r) => r.pattern.startsWith("/api/chat"),
+    (r) => r.pattern.startsWith("/api/debugger"),
+    re("GET", /^\/api\/tasks\/([^/]+)\/debugger$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/message$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/interrupt$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/send-to-engineer$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/send-to-pm$/.source),
+    re("POST", /^\/api\/agents\/built-in\/([^/]+)\/run$/.source),
+    (r) => r.pattern.startsWith("/api/cto"),
+    exact("GET", "/api/stats/by-type"),
+    exact("GET", "/api/stats/daily"),
+    exact("POST", "/api/system/kill-process"),
+    exact("GET", "/api/system/run-tests"),
+    exact("POST", "/api/system/run-tests"),
+    exact("GET", "/api/attention"),
+    exact("GET", "/api/decisions"),
+    exact("GET", "/api/check-runs"),
+    (r) => r.pattern.startsWith("/api/integration"),
+    exact("GET", "/api/close-out/outcomes"),
+    re("GET", /^\/api\/tasks\/([^/]+)\/integration-job$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/done\/cancel$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/worktree-handoff\/discard$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/review$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/review\/again$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/review\/message$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/pm\/message$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/pm\/interrupt$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/attachments\/([^/]+)$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/attachments$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/shots$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/shots$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/shots\/([^/]+)$/.source),
+    re("DELETE", /^\/api\/tasks\/([^/]+)\/shots\/([^/]+)$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/ui-verification$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/needs-input\/dismiss$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/clear-worktree$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/output$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/logs$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/checks$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/stats$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/diff-stats$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/diff$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/merge-conflict$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/worktree-dirty$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/file$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/remote-validation\/log$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/remote-validation\/events$/.source),
+    exact("GET", "/api/config/raw"),
+    exact("PUT", "/api/config/raw"),
+    (r) => r.pattern.startsWith("/api/dev/"),
+    (r) => r.pattern.startsWith("/api/models"),
+    (r) => r.pattern.startsWith("/api/playground"),
+    (r) => r.pattern.startsWith("/api/model-providers"),
+    exact("GET", "/api/agents/queued"),
+    exact("GET", "/api/agents/detect"),
+    exact("GET", "/api/agents/detect/stream"),
+    exact("POST", "/api/agents/updates"),
+    re("GET", /^\/api\/agents\/([^/]+)\/logs$/.source),
+    (r) => r.pattern.startsWith("/api/ntfy/"),
+    exact("POST", "/api/transcribe"),
+    (r) => r.pattern.startsWith("/api/service/"),
+    exact("POST", "/api/server/restart"),
+    re("POST", /^\/api\/tasks\/([^/]+)\/(sync|hotfix|abandon|reopen|archive|unarchive)$/.source),
+    exact("POST", "/api/tasks/freeform"),
+    exact("POST", "/api/docs/create"),
+    exact("POST", "/api/docs/freeform"),
+    re("GET", /^\/api\/freeform\/runs\/([^/]+)$/.source),
+];
+const ALL_MATCHERS = [...CONTROL_API_MATCHERS, ...FILE_CLI_MATCHERS, ...UI_ONLY_MATCHERS];
+export function isApiRouteCovered(route) {
+    if (!route.pattern.startsWith("/api/"))
+        return true;
+    return ALL_MATCHERS.some((m) => m(route));
+}
+export function uncoveredApiRoutes(routes) {
+    return routes.filter((r) => r.pattern.startsWith("/api/") && !isApiRouteCovered(r));
+}

package/dist/cli/cli-session.d.ts

@@ -0,0 +1,6 @@
+export declare function cliSessionPath(root: string, cacheDir: string): string;
+export declare function readCliSession(root: string, cacheDir: string): string | null;
+export declare function writeCliSession(root: string, cacheDir: string, token: string): void;
+export declare function clearCliSession(root: string, cacheDir: string): void;
+/** Parse `Set-Cookie` for the RepoOS session token value. */
+export declare function sessionTokenFromSetCookie(setCookie: string | string[] | undefined, cookieName: string): string | null;

package/dist/cli/cli-session.js

@@ -0,0 +1,56 @@
+/**
+ * Persisted RepoOS web session for the CLI (#0723).
+ *
+ * Stores the HttpOnly session token the server issued at login so repeat CLI
+ * calls do not need OTP every time. Mode 0600, never logged. Loopback calls
+ * still prefer the server's local-cli-token when present (#0582).
+ */
+import { chmodSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+export function cliSessionPath(root, cacheDir) {
+    return join(root, cacheDir, "cli-session");
+}
+export function readCliSession(root, cacheDir) {
+    try {
+        const token = readFileSync(cliSessionPath(root, cacheDir), "utf8").trim();
+        return token || null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeCliSession(root, cacheDir, token) {
+    const dir = join(root, cacheDir);
+    mkdirSync(dir, { recursive: true });
+    const path = cliSessionPath(root, cacheDir);
+    writeFileSync(path, `${token}\n`, { mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        /* best-effort */
+    }
+}
+export function clearCliSession(root, cacheDir) {
+    try {
+        unlinkSync(cliSessionPath(root, cacheDir));
+    }
+    catch {
+        /* absent */
+    }
+}
+/** Parse `Set-Cookie` for the RepoOS session token value. */
+export function sessionTokenFromSetCookie(setCookie, cookieName) {
+    if (!setCookie)
+        return null;
+    const parts = Array.isArray(setCookie) ? setCookie : [setCookie];
+    for (const header of parts) {
+        const segment = header.split(";")[0]?.trim();
+        if (!segment?.startsWith(`${cookieName}=`))
+            continue;
+        const value = segment.slice(cookieName.length + 1);
+        if (value)
+            return value;
+    }
+    return null;
+}

package/dist/cli/effective-from-api.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Resolve the engineer a task will run with, from server API payloads (#0723).
+ * Uses the same rules as the UI (`effective-agent.ts`), not a local disk reindex.
+ */
+import { type EffectiveAgent, type EffectiveAgentInput } from "../ui-app/src/lib/effective-agent.js";
+export interface ApiTaskOverrides {
+    agentOverride?: string | null;
+    cliOverride?: string | null;
+    modelOverride?: string | null;
+}
+export declare function effectiveEngineerFromApi(agents: readonly EffectiveAgentInput[], task: ApiTaskOverrides): EffectiveAgent;

package/dist/cli/effective-from-api.js

@@ -0,0 +1,12 @@
+/**
+ * Resolve the engineer a task will run with, from server API payloads (#0723).
+ * Uses the same rules as the UI (`effective-agent.ts`), not a local disk reindex.
+ */
+import { resolveEffectiveAgent, } from "../ui-app/src/lib/effective-agent.js";
+export function effectiveEngineerFromApi(agents, task) {
+    return resolveEffectiveAgent(agents, {
+        agentOverride: task.agentOverride ?? null,
+        cliOverride: task.cliOverride ?? null,
+        modelOverride: task.modelOverride ?? null,
+    }, "engineer");
+}

package/dist/cli/help.js

@@ -8,9 +8,9 @@
  * usage line lives in per-command help rather than inline.
  */
 import { readVersion } from "../core/version.js";
-import { PRIORITIES, TASK_TYPES } from "../core/types.js";
 import { c } from "./colors.js";
 import { table, termWidth, visibleWidth, wrap } from "./layout.js";
+import { NEW_FLAG_HELP, UPDATE_FLAG_HELP, flagSummary, flagUsageTokens } from "./task-flags.js";
 /** Commands whose own argument parser already handles `--help`. */
 export const SELF_HELP_COMMANDS = new Set(["support", "tunnel", "shot", "uninstall"]);
 const GROUPS = [
@@ -48,9 +48,9 @@ const GROUPS = [
             { name: "show", usage: "show <id>", desc: "Show a task's full spec" },
             {
                 name: "new",
-                usage: `new "<title>" [--ai --type ${TASK_TYPES.join("|")} --area <a> --priority ${PRIORITIES.join("|")} --body <b>]`,
+                usage: 'new "<title>" ' + flagUsageTokens(NEW_FLAG_HELP).join(" "),
                 desc: "Create a task",
-                flags: `--ai · --type · --area · --priority · --body`,
+                flags: flagSummary(NEW_FLAG_HELP),
             },
             {
                 name: "new-doc",
@@ -71,9 +71,87 @@ const GROUPS = [
             {
                 name: "mv",
                 usage: "mv <id> <status> [--note <text>] [--force-not-merged]",
-                desc: "Move a task to a new status — never merges code",
+                desc: "Move a task to a new status (file write) — use review/done for handoff and close-out",
                 flags: '--note "..." · --force-not-merged',
             },
+            {
+                name: "start",
+                usage: "start <id> [--fresh] [--json] [--port N]",
+                desc: "Start or resume the engineer on a task (POST /api/tasks/:id/start)",
+                flags: "--fresh · --json · --port",
+            },
+            {
+                name: "pause",
+                usage: "pause <id> [--json] [--port N]",
+                desc: "Pause the running agent (POST /api/tasks/:id/pause)",
+                flags: "--json · --port",
+            },
+            {
+                name: "message",
+                usage: 'message <id> "<text>" [--json] [--port N]',
+                desc: "Send a follow-up to the task agent (POST /api/tasks/:id/message)",
+                flags: "--json · --port",
+            },
+            {
+                name: "review",
+                usage: "review <id> [--wait] [--json] [--port N]",
+                desc: "Request review synchronously (PATCH status=review; waits for handoff)",
+                flags: "--wait · --json · --port",
+            },
+            {
+                name: "done",
+                usage: "done <id> [--commit-dirty] [--wait] [--json] [--port N]",
+                desc: "Move to done through the close-out pipeline (POST /api/tasks/:id/done)",
+                flags: "--commit-dirty · --wait · --json · --port",
+            },
+            {
+                name: "override",
+                usage: "override <id> [--cli <name>] [--model <model>] [--json] [--port N]",
+                desc: "Set per-task engineer overrides (PATCH /api/tasks/:id)",
+                flags: "--cli · --model · --json · --port",
+            },
+            {
+                name: "preview",
+                usage: "preview <id> [--stop] [--json] [--port N]",
+                desc: "Start or stop the task preview (POST /api/tasks/:id/preview)",
+                flags: "--stop · --json · --port",
+            },
+            {
+                name: "config",
+                usage: "config get|set <key> [value] [--json] [--port N]",
+                desc: "Read or write server config (GET/PATCH /api/config)",
+                flags: "--json · --port",
+            },
+            {
+                name: "runners",
+                usage: "runners [--probe] [--json] [--port N]",
+                desc: "Remote validation runner status (and optional probe)",
+                flags: "--probe · --json · --port",
+            },
+            {
+                name: "agents",
+                usage: "agents [--json] [--port N]",
+                desc: "List running agents (GET /api/agents/running)",
+                flags: "--json · --port",
+            },
+            {
+                name: "stats",
+                usage: "stats [--json] [--port N]",
+                desc: "Board spend summary (GET /api/stats/board)",
+                flags: "--json · --port",
+            },
+            {
+                name: "watch",
+                usage: "watch [--json] [--task <id>] [--port N]",
+                desc: "Stream board SSE events for external driver sessions (GET /api/events)",
+                flags: "--json · --task · --port",
+            },
+            {
+                name: "driver",
+                usage: "driver brief [--json] [--port N]",
+                desc: "Print the CTO's board brief from live state (GET /api/driver/brief)",
+                flags: "--json · --port",
+            },
             {
                 name: "rm",
                 usage: "rm <id> --yes",
@@ -82,9 +160,15 @@ const GROUPS = [
             },
             {
                 name: "update",
-                usage: "update <id> [flags]",
+                usage: "update <id> " + flagUsageTokens(UPDATE_FLAG_HELP).join(" "),
                 desc: "Edit a task's metadata or body",
-                flags: `--title · --area · --priority ${PRIORITIES.join("|")} · --type ${TASK_TYPES.join("|")} · --body · --branch · --assigned-to`,
+                flags: flagSummary(UPDATE_FLAG_HELP),
+            },
+            {
+                name: "story",
+                usage: 'story new "<name>" --body <text|-> | story list | story show <number|name> | story update <number|name> [--name …] [--body <text|->]',
+                desc: "Create, list, show or update story definitions verbatim (no PM agent)",
+                flags: "new/show/update: --body - · list/show: --json",
             },
             {
                 name: "index",
@@ -197,6 +281,12 @@ const EXAMPLES = [
     { cmd: 'repoos mv 0012 active --note "Fix the regression in checkout; see review"' },
     { cmd: 'repoos note 0012 "Handle the reviewer\'s suggestions before the next review"' },
     { cmd: 'repoos update 0012 --title "New title" --area web,core' },
+    {
+        cmd: 'repoos story new "Project updates email" --body "Why this slice exists, scope and non-goals"',
+        comment: "verbatim story, no PM",
+    },
+    { cmd: "repoos story list", comment: "registered stories, with numbers" },
+    { cmd: "repoos story show 0007", comment: "definition + member tasks and their statuses" },
     { cmd: "repoos list ready" },
     { cmd: "repoos outline src/server/agents.ts", comment: "then read only the range you need" },
     { cmd: "repoos doctor", comment: "passing checks are hidden; --verbose shows all" },
@@ -216,6 +306,7 @@ const ALIASES = {
     add: "new",
     reindex: "index",
     server: "serve",
+    stories: "story",
 };
 /** Resolve an alias to its canonical command name (identity when not an alias). */
 export function canonicalCommand(name) {

package/dist/cli/index.js

@@ -6,6 +6,7 @@
 import { cmdInit } from "../commands/init.js";
 import { cmdList, cmdShow, cmdMv, cmdRm, cmdUpdate, cmdNew, cmdIndex, cmdNote, } from "../commands/tasks.js";
 import { cmdDocs, cmdNewDoc } from "../commands/docs.js";
+import { cmdStory } from "../commands/stories.js";
 import { cmdGc } from "../commands/gc.js";
 import { cmdOutline } from "../commands/outline.js";
 import { cmdCheck } from "../commands/check.js";
@@ -20,6 +21,9 @@ import { cmdDoctor } from "../commands/doctor.js";
 import { cmdCertify } from "../commands/certify.js";
 import { cmdSupport } from "../commands/support.js";
 import { cmdService } from "../commands/service.js";
+import { cmdAgentsRunning, cmdConfig, cmdDone, cmdMessage, cmdOverride, cmdPause, cmdPreview, cmdReview, cmdRunners, cmdStart, cmdStats, cmdDecisions, } from "../commands/control-api.js";
+import { cmdWatch } from "../commands/watch.js";
+import { cmdDriver } from "../commands/driver.js";
 import { checkBuild } from "../core/build.js";
 import { loadConfig } from "../core/config.js";
 import { reexecAfterStaleBuild, reexecUnderBunIfRequested } from "../core/runtime.js";
@@ -169,6 +173,10 @@ function main() {
         case "docs":
             void cmdDocs(rest);
             break;
+        case "story":
+        case "stories":
+            cmdStory(rest);
+            break;
         case "index":
         case "reindex":
             cmdIndex(rest);
@@ -192,6 +200,91 @@ function main() {
         case "check":
             void cmdCheck(rest);
             break;
+        case "start":
+            void cmdStart(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "pause":
+            void cmdPause(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "message":
+            void cmdMessage(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "review":
+            void cmdReview(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "done":
+            void cmdDone(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "override":
+            void cmdOverride(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "preview":
+            void cmdPreview(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "config":
+            void cmdConfig(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "runners":
+            void cmdRunners(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "agents":
+            void cmdAgentsRunning(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "stats":
+            void cmdStats(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "decisions":
+        case "attention":
+            void cmdDecisions(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "watch":
+            void cmdWatch(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "driver":
+            void cmdDriver(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
         case "shot":
             void cmdShot(rest)
                 .then((code) => {

package/dist/cli/repoos-api.d.ts

@@ -0,0 +1,56 @@
+/**
+ * HTTP client for the running RepoOS control plane (#0723).
+ *
+ * Authenticates with the loopback local-cli token when available (#0582), else a
+ * stored session cookie, and transparently re-logs in via the dev backdoor on
+ * 401 after a server reload (never prints the backdoor code).
+ */
+import { loadConfig } from "../core/config.js";
+export declare class RepoOsApiError extends Error {
+    readonly status: number;
+    readonly body?: unknown | undefined;
+    constructor(message: string, status: number, body?: unknown | undefined);
+}
+export interface RepoOsApiOptions {
+    root?: string;
+    port?: number;
+    json?: boolean;
+}
+export interface ApiJson {
+    ok?: boolean;
+    error?: string;
+    [key: string]: unknown;
+}
+export declare function resolveControlPlaneBase(opts?: RepoOsApiOptions): {
+    root: string;
+    baseUrl: string;
+    config: ReturnType<typeof loadConfig>;
+};
+export declare class RepoOsApi {
+    private readonly root;
+    private readonly baseUrl;
+    private readonly config;
+    private session;
+    constructor(opts?: RepoOsApiOptions);
+    private localToken;
+    get base(): string;
+    private buildHeaders;
+    private devBackdoorLogin;
+    health(): Promise<boolean>;
+    /** Re-run dev backdoor login after a 401 (e.g. server reload). */
+    reauthenticate(): Promise<boolean>;
+    /** Open `GET /api/events` with the same auth as other CLI calls. */
+    fetchEventStream(): Promise<Response>;
+    request(method: string, path: string, body?: unknown, opts?: {
+        retryAuth?: boolean;
+    }): Promise<{
+        status: number;
+        body: ApiJson;
+    }>;
+    requestOk(method: string, path: string, body?: unknown, allowedStatuses?: number[]): Promise<ApiJson>;
+}
+export declare function pollUntil<T>(fn: () => Promise<T | null>, opts: {
+    intervalMs?: number;
+    timeoutMs?: number;
+    label?: string;
+}): Promise<T>;